Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: Hyslt/bKiZYYDlLAMtP9+xcvK5gqIS4aaatFfN3GVMQ=
Subject key identifier: C8:66:FE:3D:1E:25:CE:33:75:0D:EB:07:7A:D9:A8:C1:93:39:EA:BF
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 0199FF5971A3565455244950150EDCF046B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 02:01:15 +0000
Manifest this update: Mon 20 Oct 2025 02:01:15 +0000
Manifest next update: Tue 21 Oct 2025 02:01:15 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: 0D9Pm9KDmN3mGtGgrvyOMQoZEU6KGSGzisP1SMS9ZV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:71:a3:56:54:55:24:49:50:15:0e:dc:f0:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Oct 20 02:01:15 2025 GMT
Not After : Oct 21 02:01:15 2025 GMT
Subject: CN=c866fe3d1e25ce33750deb077ad9a8c19339eabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:38:d3:36:8f:6a:fd:c9:e0:1e:32:07:15:
01:a7:87:81:bf:63:44:b7:0e:1e:47:c3:5c:fc:98:
18:2d:be:b9:6b:1d:fe:a7:93:e6:eb:76:ac:3e:46:
fa:69:a3:c0:67:78:33:49:cf:00:2a:0d:63:53:44:
21:b8:05:e0:26:4e:7d:ea:e4:04:36:ce:9a:52:06:
58:7b:b0:30:bc:ad:e8:eb:c9:48:7e:49:99:d5:18:
2c:bb:22:0e:db:86:1c:99:87:40:fb:3f:90:3c:38:
5a:4d:81:a8:1f:1e:bd:30:f3:9b:40:f7:37:9a:61:
e5:86:5f:34:31:b7:44:54:68:48:58:6b:c0:44:8f:
8f:3e:d3:09:e5:e7:c2:da:fe:2a:8c:ef:bd:48:18:
5b:5a:1e:94:55:72:e9:c9:f4:5d:7d:96:99:6c:2f:
6f:c2:12:37:b0:a1:c0:f1:7f:f7:b4:f9:56:51:fb:
c1:49:48:f6:40:7e:8e:fd:60:e4:10:36:e7:b5:8e:
1d:48:51:a8:a0:b0:20:15:58:6e:31:0d:44:19:24:
46:2d:e0:43:e8:3f:fc:2c:dd:73:3e:24:dc:c1:4c:
64:b4:2d:5c:ea:4e:c5:3d:9f:eb:39:9d:60:29:d2:
82:81:67:41:05:e2:48:02:97:79:97:54:1d:e4:8d:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:66:FE:3D:1E:25:CE:33:75:0D:EB:07:7A:D9:A8:C1:93:39:EA:BF
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:13:2a:5e:24:44:37:6e:fc:2e:38:6a:00:ab:86:68:be:d9:
7d:49:cc:c7:a9:ee:af:a6:9e:3e:0f:d6:67:3e:c2:5f:1d:59:
39:95:31:ec:5a:79:62:38:fe:44:af:10:74:5c:39:0d:52:ac:
59:a4:bd:7e:f8:d7:5a:d3:52:dd:ae:2f:78:71:96:73:36:bf:
4b:56:6e:1a:2f:8a:ff:05:bd:93:82:24:1c:6d:c0:3b:0f:bf:
2c:3f:0f:7c:28:43:b2:a9:a2:ce:77:07:9e:a8:dd:00:cc:21:
0d:f0:06:62:fd:0b:36:1d:f1:14:74:16:2c:dc:3f:ef:10:bb:
c0:0c:ea:d2:c1:21:84:da:57:64:fa:53:84:88:f3:e5:16:30:
61:64:3a:b0:f9:bc:d6:58:7e:b2:52:80:a7:b6:dd:0b:1b:0c:
83:d4:98:37:5c:57:33:63:d1:0c:44:4a:13:c0:1e:3f:0e:ea:
08:80:ec:60:8c:b0:7e:28:80:3a:d8:a2:cc:2b:89:0b:41:54:
10:c7:d1:38:01:1c:a8:5f:cc:12:82:9d:93:6e:b9:32:cf:67:
6b:c8:ef:7f:44:19:8d:22:c2:63:ff:07:43:5f:a5:25:50:df:
68:d9:9c:ca:08:f7:76:d8:9a:ea:f4:cf:81:e8:4b:8e:eb:4c:
21:70:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:36 2025 by rpki-client